Ondřej Surý bd4576b3ce Remove TKEY Mode 2 (Diffie-Hellman) ... Completely remove the TKEY Mode 2 (Diffie-Hellman Exchanged Keying) from BIND 9 (from named, named.conf and all the tools). The TKEY usage is fringe at best and in all known cases, GSSAPI is being used as it should. The draft-eastlake-dnsop-rfc2930bis-tkey specifies that: 4.2 Diffie-Hellman Exchanged Keying (Deprecated) The use of this mode (#2) is NOT RECOMMENDED for the following two reasons but the specification is still included in Appendix A in case an implementation is needed for compatibility with old TKEY implementations. See Section 4.6 on ECDH Exchanged Keying. The mixing function used does not meet current cryptographic standards because it uses MD5 [RFC6151]. RSA keys must be excessively long to achieve levels of security required by current standards. We might optionally implement Elliptic Curve Diffie-Hellman (ECDH) key exchange mode 6 if the draft ever reaches the RFC status. Meanwhile the insecure DH mode needs to be removed.		2023-03-08 08:36:25 +01:00
..
dns	Remove TKEY Mode 2 (Diffie-Hellman)	2023-03-08 08:36:25 +01:00
isc	Fix memory leak in isc_hmac_init	2023-02-26 22:56:07 +00:00
isccc	remove isc_task completely	2023-02-16 18:35:32 +01:00
isccfg	Remove TKEY Mode 2 (Diffie-Hellman)	2023-03-08 08:36:25 +01:00
ns	Implement dns_db node tracing	2023-02-28 11:44:15 +01:00
.gitignore	The isc/platform.h header has been completely removed	2021-07-06 05:33:48 +00:00
Makefile.am	Move irs_resconf into libdns and remove libirs	2023-02-24 09:38:59 +00:00